Attachment 2 -PWS-ESS Rpr Mntc Svcs.pdf

PERFORMANCE WORK STATEMENT (PWS)

For Complete ESS/EKC Repair and Maintenance Services at

DLA Distribution Oklahoma City, Oklahoma

1.0 BACKGROUND

A. The Defense Logistics Agency (DLA) is a United States (U.S.) Department of Defense (DoD) agency providing worldwide logistics support to the missions of the Military Departments and the Combatant Commands.

B. In support of these missions, DLA Installation Management (DM) maintains a presence at each DLA locations for the life, health, and safety systems including Electronic Security Systems (ESS) and Electronic Key System (EKC). DM serves as the functional proponent for all ESS requirements, policy, and procedures.

C. In support of DM, DLA Information Operations Enterprise Capabilities Portfolio (J62B) executes program and technology management responsibility for ESS. ESS encompasses Intrusion Detection Systems (IDS), Access Control Systems (ACS), Closed Circuit Television (CCTV) systems, intercoms and other alert type systems for DLA facilities and personnel.

D. DLA Distribution Oklahoma City, Oklahoma (DDOO) is a tenant at Tinker Air Force Base Oklahoma City, OK. The compound covers a combined area of approximately 30 acres and includes 14 warehouse buildings, one of which is the DLA Distribution Main Warehouse and Administration Building 506.

2.0 GENERAL REQUIREMENTS

A. This Section provides general information relating to the conditions of operation and general requirements relating to the ESS Maintenance Support Services.

B. This is a non-personal services contract to provide implementation of technical services for DLA Distribution Oklahoma City, Oklahoma (DDOO). DDOO has a requirement for a Contractor to provide maintenance, sustainment, and repair services for the repair, operations, and maintenance sustainment support for DLA Distribution Oklahoma City ESS for the Lenel, Pelco CCTV system, Federal Signal Mass Notification System and Morse Keywatch System.

These ESS and EKC systems include various subcomponents, such as card readers, intercom devices, security controllers, video recorders, streamers, security cameras, sensors, central monitoring equipment, duress alarms and key containers.

C. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. The Government and the Contractor understand that the services to be provided under this contract by the Contractor are non-personal services and that no employer-employee relationship exists between the Government and the Contractor. The Government may provide technical direction which will assist the Contractor in accomplishing the PWS; however, the Government will not control the methods used by the Contractor to perform the service requirements set forth in the PWS.

D. The Contractor shall submit an Accident Prevention Plan to the Contracting Officers Representative (COR) within 10 (ten) business days of contract start. No work shall start prior to COR receiving the approved Accident Prevention Plan.

E. The Contractor shall turn over any equipment or material removed through this task to the Government at the completion of work, or after COR approval, properly dispose of in accordance with regulations and/or local codes.

F. The Contractor shall build and maintain a separate set of drawings, elementary diagrams, and wiring diagrams of the system to be used for As-Built Drawings and shall keep this set accurately and neatly up to date with all changes and additions throughout the contract. As-Built Drawings shall be developed and maintained by the Contractor and depict actual conditions. As- Built Drawings are to be submitted to the COR in original Auto Computer Aided Design (AutoCAD) and Adobe Portable Document Format (PDF) format and shall not be overlays. A complete As-Built Drawing will be submitted to the Government within 14 calendar days of completed work.

G. The Contractor will provide a Monthly Status Report (MSR) due on the last business day of the month by noon local time. The MSR shall include, but not be limited to:

1. Contract number.

2. Brief task description.

3. Review of project plans including work accomplished during the reporting period and/or significant events.

a. Project progress.

b. Problem areas.

c. Anticipated activity for the next reporting period.

d. Project Schedule/Plan.

e. Configuration Management Plan.

f. Configuration Audit.

g. 8570 Report Spreadsheet.

h. Contractor Quality Control Plan.

6 The Contractor shall follow all applicable National Electrical Code (NEC), Unified

Facilities Criteria (UFC), United Technologies Corporation (UTC), National Fire Protection Association (NFPA), and Security Standards.

7. The Contractor will follow all Security Technical Implementation Guides (STIGs), Data

Encryption standards, Intelligence Community Directive (ICD)/ Intelligence Community Standard (ICS) 705, DLA Physical Security Manual and DLA building codes.

8. The Contractor shall obtain written J6 approval through the COR if any digital or physical media is required. All video, still photos, digital photos, all usernames, passwords, and any other documentation obtained and developed during the execution of this contract shall be turned over to the Government with all digital and hard copy files and associated negatives at the completion of this project. Digital photographs shall be submitted to the Government in Joint Photographic Experts Group (JPG) format, and the Contractor shall delete all associated files from their records.

9. The Contractor shall furnish all labor, supervision, tools, materials, equipment, transportation, and management necessary for ESS/EKC Maintenance Support Services.

10. The Contractor shall be an authorized, licensed service representative Lenel ESS, Pelco

CCTV systems, Federal Signal Mass Notification System and Morse Keywatch Systems and comply with all applicable DoD, Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and make them available upon award to the Government and/or upon request.

11. With the ongoing efforts keeping up with cyber and Enterprise infrastructure updates, the

Government reserves the right to ADD to or DELETE from this contract anytime during the period of the contract as the need arises.

2.1 CORE HOURS OF OPERATION

Sites core hours of operation are 0700-1530 hours local time (PST) Monday through Friday.

Emergency repairs may be required after core hours IAW with the PWS requirements.

2.2 FEDERAL HOLIDAYS

The Contractor will not normally be required to provide services on Federal holidays. The following holidays are observed:

Observed Federal Holidays New Year Day Martin Luther King Day Presidents Day Memorial Day Juneteenth Day Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Day Christmas Day

A. When one of the above holidays falls on Sunday, the following Monday will be observed as a legal holiday. When the federal holiday falls on a Saturday, the preceding Friday is observed as the holiday.

B. In the event an Executive Order issued by the President of the United States declares Agencies of the Federal Government closed for a regularly scheduled workday, the Contacting Officer (KO) or designee will determine and advise the Contractor on whether services are required for that day.

2.3 PLACE OF PERFORMANCE

Work shall be performed at DLA Distribution Oklahoma City Oklahoma which is a tenant activity of the Tinker Air Force Base. The ESS, CCTV, MNS and Key Control systems are entirely located within Tinker Air Force Base Oklahoma City, OK.

2.4 PERIOD OF PERFORMANCE

The period of performance for this contract is a one (1) year base performance period with two

(2) one-year optional performance periods.

2.5 DOD 8570.01-M, INFORMATION ASSURANCE (IA) WORKFORCE IMPROVEMENT

PROGRAM

A. The DOD 8570.01-M, Information Assurance Workforce Improvement Program, requires training and certification for IA duties performed. All contract employees performing IA functions shall meet the requirements in accordance with DOD/DLA guidance. Additionally, all contract employees shall be certified in operating systems on any system on which system administration duties are performed. Proof of certification shall be provided before privileged access is granted, at time of proposal/resume submission; this includes, but is not limited to, system administration access, network administration access, router/switch access, firewall access, and Intrusion Detection System access. All documentation required for security certification will be maintained by both the Contractor and the Government. Copies of security certification will be provided to the Government at contract award. All contract employees will have acquired the necessary certification requirements, per the DOD 8570.01-M, and remain in good standing throughout the entire period of performance of the contract requirements. These certification requirements are not based on position title; they are based on duties.

B. All contract personnel requiring elevated, privileged access to any system or the network, either during provisioning or post award, shall obtain an IT-II clearance, and meet DOD 8570.01-M Information Assurance Technical (IAT) II or III depending on the Key Personnel Position Requirements and comply the Computing Environment certification requirements during the contract period. The Contractor shall provide a list of the personnel performing these duties and all documentation to the COR prior to work commencing.

2.6 GOVERNMENT SUPPORT SERVICES

A. The Government will furnish the following utility services at existing outlets for use in those facilities provided by the Government, and as may be required for the work to be performed under the contract: electricity, natural gas, fresh water, and sewage service. Information concerning the location of existing outlets may be obtained from the COR. Utilities specified above will be furnished at no cost to the Contractor.

B. In most cases, the Contractor will access existing Government Furnished Equipment (GFE).

All specialized software required by the Contractor must be provided to the Government by the Contractor at the time of the contract award. All Contractor provided software that will be required to be installed on GFE will be evaluated and will require approval prior to installation.

This includes utilities required to develop, communicate, and make configuration updates to a system.

C. A Government-provided laptop (thick client) will be supplied if needed to access the server and/or assigned DLA network administrators.

D. The Contractors are responsible for maintaining and supplying servers, hardware, or networks for DLA Site Name as needed. The Government will not be responsible for Contractor supplied equipment.

2.7 CONTRACTOR FURNISHED EQUIPMENT, MATERIALS AND SERVICES

A. The Contractor shall provide all equipment, materials, and services to perform the requirements of this contract.

B. The Contractor shall provide new parts and components when providing the services described herein. The Government will not accept factory reconditioned parts. All replacement units, parts, components, and materials to be used shall be compatible with that existing equipment on which it is to be used. Shall be of equal or better quality than original equipment specifications; shall comply with applicable Government, commercial, or industrial standards such as National Board of Underwriters or Underwriters' Laboratories, Inc. National Electrical Manufacturer's Association, and used in accordance with original design and manufacturer’s intent. If the original manufacturer has updated the quality of parts for current production, parts supplied under this contract shall equal or exceed the updated quality.

C. The Contracting Officer may require the Contractor to submit manufacturer's descriptive data and certifications for materials and equipment used. This applies to all equipment hardware and software installed by the Contractor or existing equipment hardware and software. Such submittals shall be delivered to the Contracting Officer within fifteen (15) calendar days of request. Manufacturer's descriptive data and certificates shall include the name of the manufacturer, model number or other identifying information, catalog cut, and other identifying data and information describing the performance, capacity, rating, and application/installation instructions which clearly illustrate that the proposed item meets all applicable standards.

D. The Contractor is responsible for coordinating with the DLA Site Name’s Accountable Property Officer (APO) for inspection of property, components, replaced parts and material prior to disposal to determine suitability as potentially accountable property.

2.8 GOVERNMENT POINTS OF CONTACT

A. CONTRACTING OFFICER (KO)

Name: Christopher Robinson Comm. Phone: 717-770-7285 Email: Christopher.robinson@dla.mil Address: 5430 Mifflin Ave, New Cumberland, PA 17070-5008

B. CONTRACT SPECIALIST (KS)

Name: Joseph Crowley Comm. Phone: 717-770-5445 Email: joseph.crowley@dla.mil Address: 5430 Mifflin Ave, New Cumberland, PA 17070-5008

C. ON-SITE REPRESENTATIVE (OSR)

Name: Angela Phillips Comm. Phone: 405-855-7190 Email: angela.d.phillips@dla.mil Address: 3301 F Ave, Bldg. 506, Tinker AFB, OK 73145

D. CONTRACTING OFFICER REPRESENTATIVE (COR)

Name: David Overton Comm. Phone: 405-855-3168 Email: David.overton@dla.mil Address: 3301 F Ave, Bldg. 506 KP, Tinker AFB, OK 73145

E. TECHNICAL POINT OF CONTACT (TPOC)

Name: Grace Pickowitz Comm. Phone: 269-961-4365 Email: grace.pickowitz@dla.mil Address: 74 N Washington Ave, Battle Creek MI 49037

2.9 PERSONNEL REQUIREMENTS

A. The Contractor shall provide skilled, experienced, professional and/or technical personnel consistent with the requirements of this PWS, and the staffing plans in the Contractor’s technical proposal. Contractor personnel supporting cybersecurity functions shall be appropriately certified according to DoD 8570.01-M at contract award. The Contractor is responsible to provide qualified personnel as specified and required by the PWS and shall bear all cost for training of its personnel. The Government will not reimburse the Contractor for the cost for training of Contractor personnel. Training will not be allowed on Government time.

B. The Contractor shall provide a monthly DoD 8570.01-M deliverable known as 8570 Report Spreadsheet to the COR/COTR that includes a list of applicable DoD 8570.01-M key personnel.

The following information shall be provided in the report, due by the 5th business day of each month:

1. Name

2. IA Category

3. IA Level

4. Company

5. Contract Name/Description

6. COR

7. Contract #

8. Primary/Baseline IA Certification Held

9. Date of Primary/Baseline IA Certification

10. Date Primary/Baseline IA Certification Expires

11. Primary Computing Environment (CE) Certification Held

12. Date Primary CE Certification Received

13. Primary IA Certification Status (Current or Past Due)

14. Primary CE Certification Status (Current or Past Due)

C. If a certification becomes obsolete during the life of the contract, the Contractor shall be responsible for ensuring applicable personnel obtain an acceptable replacement certification prior to the IT/OT product’s end of support or end of life.

D. The provisions of this PWS shall be fully applicable to all subcontractors. Information given to the Contractor during the life of this contract shall only be used for the purpose of carrying out the provisions of this contract. Agency marked “Controlled Unclassified (CUI)” or bearing other sensitivity markings shall be handled in accordance with (IAW) Agency information security program regulations and shall not be divulged or disclosed without Agency permission in writing. Requests for disclosure shall be addressed to the Contracting Officer (KO).

E. Resumes and required certifications should be submitted for all Key Personnel who will be directly involved in the PWS Requirements as well as proposed Key Personnel substitutions, and shall be skilled, experienced, professional, or technical personnel consistent with the task-specific requirements of this PWS.

1. Most of the work to be performed under this requirement is unclassified, however, a security clearance maybe required. All Contractor personnel proposed to work on the network, or any IT Capabilities/Functions (at a minimum) will be required to have IT-II, a clearance requiring a T3 or equivalent or an IT-I, a clearance requiring a Single Scope Background Investigation, prior to the work commencing.

2. All Contractor personnel requiring elevated/privileged access to any system or network components, either during provisioning or post award, shall also meet DoD 8570.1-M IA Technical (IAT) II baseline and Computing Environment (CE) certifications, applicable to the existing computing environment. Provide a copy of all current certifications in proposal and to the COR in the 8570 Report Spreadsheet (Template to be delivered) at time of award, in the Monthly Status Report and within two (2) days of any changes. Certifications are to remain in good standing during the contract period of performance.

3. All Contractor personnel must be proficient in reading and capable of communicating effectively in English.

4. Each Contractor employee shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence, or who presents evidence from the Immigration and Naturalization Service that employment will not affect his immigration status.

5. All work shall be performed by Contractor personnel specifically qualified and trained to work on all applicable systems cited in this PWS

6. Identification Badges / Common Access Card (CAC): Every Contractor employee

(including those of sub-contracts) is required to obtain an identification card badge (ID card) / Common Access Card (CAC) prior to starting work on this contract. Not later than fifteen

(15) calendar days prior to contract full performance start date, the Contractor shall provide the COR access rosters of all personnel requiring access to restricted or controlled access areas. The roster shall include each employee’s full name, identification card number (if assigned), branch or section (if applicable), and security clearance (level of clearance and last investigation date, if applicable). The Contractor shall update the roster and provide to the COR No Later Than (NLT) five (5) workings days prior to the date of required access. The Contractor shall make all modifications to the rosters and provide an update to the COR within 12 hours for employees whose employment has been terminated and for employees who no longer require access to restricted or controlled access areas. Lost or stolen Contractor employee badges must be reported to security before a replacement ID/CAC card will be issued. The Contractor will submit a completed DLAH 1728 and DD FORM 2875 (August 2009) to the COR. The DLAH 1728 (Oct 2004 (EG)) and DD FORM 2875 (August 2009) must filled in using a PDF editor and submitted either via encrypted email or hand carried to the COR. Completed forms shall not be faxed. The DLAH 1728 (Oct 2004 (EG)) and DD FORM 2875 (August 2009) will be provided by the COR at Task Order award.

Note: DD FORM 2875 is only required for elevated / privileged systems access. The Contractor shall return all Government-furnished CAC, Access ID Badges, electronic key cards, and any other Government issued passes, e.g., vehicle pass, to the COR within 24 hours of the completion of the contract or upon termination of an individual’s employment, whichever comes first. Contractor personnel failing to return their CAC, Access ID Badges, and electronic key cards are subject to criminal charges under United States Code (USC) Title 18, Chapter 1, Section 499 and 701.

7. The Homeland Security Presidential Directive 12 (HSPD-12) has established criteria for

Contractors who require a Common Access Card (CAC) for either physical access to an Installation or access to Government information technology systems. The Government requires Personnel Security Investigations (PSI) to establish that applicants or incumbents either employed by the Government or working for the Government under contract are suitable for the job and are eligible for a public trust or sensitive position. Upon favorable review and initiation of the PSI, Contractor personnel may be granted temporary access pending final adjudication of the PSI. The Contractor shall request personnel clearances IAW instructions found in Technical Exhibit (TE) 1.1 Contractor Personnel Security.

8. The Contractor will not employ any person whose employment will violate the requirements of DOD5500.7, Joint Ethics Regulation.

9. All Contractor personnel shall observe local policy and procedures provided by the

Office of Information Resources governing the use of computer equipment and passwords.

Violations of local policy shall include password sharing, performing personal work, file access violations or browsing files outside the scope of the contract. The Contracting Officer shall adjudicate each case and his/her decision shall be final.

10. Where the Government has requested removal of Contractor personnel, the Contractor will provide an appropriately trained replacement. Individuals removed from this task order are removed for the duration of the task order. The Contractor will notify the COR within 24 hours when for reasons of personnel resignations, reassignments, terminations, or completion of portions of the task order, or Contractor personnel no longer require access to Government computers.

11. Contractor personnel are only authorized to attend meetings, town halls, etc., as they relate to the performance of the tasks outlined in the PWS.

2.10 KEY CONTRACTOR PERSONNEL

2.10.1 SYSTEMS ADMINISTRATOR

A. The Systems Administrator manages the day-to-day operations by monitoring system performance, configuration, maintenance, and repair. Ensures that records of system downtime and equipment inventory are properly maintained. Trains staff in how to use software and hardware. Performs troubleshooting as required. Establishes, maintains, and manages user accounts. Installs, modifies, and maintains systems and utility software. Diagnoses and recommends fixes to problems or potential problems with the network and its hardware, software, and systems.

B. Duties and Responsibilities:

1. Ensures the stable operation of the computer software systems and network connections.

This includes planning, developing, installing, configuring, maintaining, supporting, and optimizing all network software and communication links. Analyzes and resolves software program and connectivity issues. Installs, configures, and maintains hardware and software. Assists in system design, development, and implementation.

2. Minimum Clearance, Education and Experience:

a. Possess a current Secret Clearance

b. Minimum of five (5) years of overall professional experience in the systems administration field with three (3) years of overall experience in Microsoft Windows client and server operating systems.

c. Systems Administrator shall have certification that meets DoD 8570.01-M IAT-II

Information Assurance Technical (IAT) and Computing Environment certifications.

d. Preferred - Minimum five (5) years of experience with electronic security systems, specifically hands-on experience in installing, configuring, maintaining, and resolving issues with Intrusion Detection Systems, Access Control Systems and Closed Caption TV, specifically with Lenel OnGuard. Preferred Lenel OnGuard Certified Expert (LCE) certification.

3. Minimum Certifications:

a. One of the following IAT-II certifications:

CCNA Security; CySA+; GICSP; GSEC; Security+ CE; SSCP; CND, AND

b. One of the following Computer Environment certifications:

AWS CSA Associate; AWS CSA Professional; AWS CS Specialty; AWS CSO Admin Associate; Google ACE; Google PDE; OCI Foundations 2020; GIAC GCDA; MCA: DS;

MCA SQL Server; MC: Azure Administrator Associate; MCSA: WS 2012; MCSA: WS

2016; MCSE: WS 2012; MCSE: WS2016; MCITP SA; MCITP EA; MS2016: AD I&N;

GIAC GCWN; ICS Cybersecurity (301V); ISA CCST Level 1

2.11 SOFTWARE UPDATES, APPLICATION UPDATES AND PASSWORDS

The Contractor shall provide all software updates when an upgrade/patch is released from the Original Equipment Manufacturer (OEM). The Contractor shall maintain an accurate software configuration and coordinate through the Lenel Value Added Reseller (VAR) for all equipment and any other authorized application. Any software updates will need to be coordinated directly with the COR prior to procuring. All Contractor provided software will be evaluated and will require approval from the COR prior to installation. This includes any utilities required to develop, communicate, and make configuration updates to a system. The Contractor shall provide all STIG documentation for application upgrades. The Contractor shall provide documentation identifying they changed all appliance passwords and disabled or removed all unnecessary accounts. The Government should receive a complete listing of all new passwords.

The Contractor personnel shall maintain accounts once provisioned and ensure passwords and account log ins occur IAW DLA access management policies.

3.0 SECURITY

A. This project is categorized as Unclassified.

B. The provisions listed below apply to the prime Contractor and any subcontractors the Prime Contractor may employ during this contract.

C. The Contractor’s personnel shall submit their information to the COR for background checks. All Contractor personnel shall pass the Government’s background check prior to being allowed to perform work.

3.1 PERSONNEL SECURITY REQUIREMENTS

A. Most of the work to be performed under this requirement is Unclassified; however, a security clearance may be required.

1. All Contractor personnel proposed to work on the network, or any IT Capabilities/Functions (at a minimum) will be required to have IT-II, a clearance requiring a T3 or an IT-I, a clearance requiring a Single Scope Background Investigation, prior to the work commencing.

2. Each Contractor employee shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence, or who presents evidence from the Immigration and Naturalization Service that employment will not affect his immigration status.

Contractors are required to comply with the DOD 5220.22-M National Industrial Security Program Operating Manual (NISPOM) in the handling, protection, and safeguarding of classified information in their possession.

3. All Contractor personnel provided with access to Government computers and systems shall observe IT security policies and procedures as provided by the COR. The Contractor shall notify the COR within twelve (12) hours when, for reasons of personnel resignation, reassignment, termination, or completion of portions of the contract, Contractor personnel no longer require access to Government systems.

4. Contractor employees (including those of subcontracts) requiring physical access to the contractual place of performance and/or access to the DLA network/system for successful contract performance will be required to obtain a Common Access Card (CAC) prior to starting work. Lost or stolen CACs must be promptly reported by the Contractor to the KO or their authorized representative and to the appropriate Government security personnel. The Government will retain sole decisional authority on issuance of a replacement CAC.

3.1.1 IT LEVEL INVESTIGATION REQUIREMENTS

A. Contractor personnel, who perform work on sensitive IT systems or applications will be required to obtain and maintain the appropriate investigation and adjudication or suitability determination commensurate with the information contained within the application or system.

Contractor personnel will be assigned to positions which are designated at one of three levels (IT-I, IT-II, IT-III) based on the actions or tasks to be performed. The Contractor shall assure that individuals assigned to the positions of this contract, as determined by the Government, have obtained the proper eligibility as required by DODI 5200.2.

B. DLA requires that all Contractor personnel, assigned to this project shall have attained a favorable outcome to the designated IT investigative requirement assigned to each labor classification and be available to initiate work immediately upon delivery order award. IT-Level position categories are designated based on access to Government networks and IT systems and may exceed classified access requirements for this contract.

C. For IT-I, IT–II, and IT-III positions, the required investigation shall be completed, or interim access granted for individuals assigned to sensitive duties. The provisions outlined above apply to the prime Contractor and any subcontractors the prime Contractor may employ during this contract. In lieu of the correct investigations being completed when contract employees start, a waiver may be submitted if no issues exist within the OPM e-QIP Questionnaire for Public Trust Positions. The Contractor shall have the OPM e-QIP forms filled out, with any other requirements (fingerprints taken and, if required, an OF306), and reviewed by DLA Intelligence before officially hiring any Contractor employee into IT positions. Foreign Nationals are only eligible to perform non-sensitive duties and will not be investigated by the US Government.

D. DLA retains the right to request removal of Contractor personnel, regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government. The reason for removal shall be documented in writing by the Contracting Officer. When and if such removal occurs, the Contractor shall within a two to four-week timeframe, assign qualified personnel to vacancy(s) thus created regardless of whether the individual was in a key- or non-key personnel position. Current personnel security investigations conducted for access to classified information may satisfy investigation requirements for IT-Level position investigations. All other IT-Level position investigations will be performed by the DLA Personnel Security Office. DLA requires that all Contractor personnel, assigned to this project shall have attained a favorable outcome to the designated IT investigative requirement assigned to each labor classification and be available to initiate work immediately upon contract award. IT-Level position categories are designated based on access to Government networks and IT systems and may exceed classified access requirements for this contract.

E. For IT-I, IT–II, and IT-III positions, the required investigation shall be completed, or interim access granted for individuals assigned to sensitive duties. The provisions outlined above apply to the prime Contractor and any subcontractors the prime Contractor may employ during this contract. In lieu of the correct investigations being completed when contract employees start, a waiver may be submitted if no issues exist within the OPM e-QIP Questionnaire for Public Trust Positions. The Contractor shall have the OPM e-QIP forms filled out, with any other requirements (fingerprints taken and, if required, an OF306), and reviewed by DLA Intelligence before officially hiring any Contractor employee into IT positions.

4.0 SOFTWARE

A. The Contractor shall observe all copyright agreements and shall be held liable for any infringement of copyrighted software licensing agreements and shall compensate the appropriate Contractor for each instance of copyright violation. In the interest of protecting Government systems from computer viruses, the Contractor shall not use public domain software nor shall Contractor personnel download software from public bulletin boards. The Contractor shall use only COTS, Contractor-developed, or Government-furnished software in performance of this statement of work. The Contractor shall use the Microsoft Office suite of software for preparation of all documentation required in the delivery order. Should the introduction of a computer virus or malicious destruction of computer software, stored information, or hardware result from the use of public domain software or from software taken from a public bulletin board, the Contractor shall be required to repair the damage at no expense to the Government and without impact on delivery schedules or daily operations.

B. The Contractor shall be responsible for all software maintenance activities in this PWS including but not limited to firmware updates, OS patching, software patches, etc. for the duration of the contract period.

4.1 DATA USE, DISCLOSURE OF INFORMATION AND HANDLING OF SENSITIVE

INFORMATION (INCLUDING PERSONALLY IDENTIFIABLE INFORMATION (PII))

A. The Contractor will maintain, transmit, retain in strictest confidence, and prevent the unauthorized duplication, use, and disclosure of information. The Contractor will provide information only to employees, Contractors, and subcontractors having a need to know such information in the performance of their duties for this project.

B. Information made available to the Contractor by the Government for the performance or administration of this effort shall be used only for those purposes and shall not be used in any other way without the written agreement of the Contracting Officer. Contractor personnel will be required to sign a non-disclosure statement.

C. If proprietary information is provided to the Contractor for use in performance or administration of this effort, the Contractor may not use such information for any other purpose except with the written permission of the Contracting Officer. If the Contractor is uncertain about the availability or proposed use of information provided for the performance or administration, then the Contractor will consult with the COR regarding use of that information for other purposes.

D. The Contractor agrees to assume responsibility for protecting the confidentiality of Government records which are not public information. Each employee of the Contractor to whom information may be made available or disclosed shall be notified in writing by the Contractor that such information may be disclosed only for a purpose and to the extent authorized herein.

E. Performance of this effort may require the Contractor to access and use data and information proprietary to a Government agency or Government Contractor which is of such a nature that its dissemination or use, other than in performance of this effort, would be averse to the interests of the Government and/or others.

F. Contractor and Contractor personnel shall not divulge, or release data or information developed or obtained in performance of this effort, until made public by the Government, except to authorized Government personnel or upon written approval of the Contracting Officer.

The Contractor will not use, disclose, or reproduce proprietary data that bears a restrictive legend, other than as required in the performance of this effort. Nothing herein shall preclude the use of any data independently acquired by the Contractor without such limitations or prohibit an agreement at no cost to the Government between the Contractor and the data owner that provides for greater rights to the Contractor.

G. All data received, processed, evaluated, loaded, and/or created because of a task order shall remain the sole property of the Government unless specific exception is granted by the Contracting Officer.

H. Contractor and Contractor personnel shall sign a Non-Disclosure Agreement prior to commencing work on a task order.

5.0 SCOPE

A. This Performance Work Statement (PWS) outlines requirements for the preventative and corrective maintenance, repair, operations, and maintenance sustainment support for DLA Distribution Jacksonville ESS for the Lenel, Pelco CCTV system, Federal Signal Mass Notification System and Morse Keywatch System at DLA Distribution Oklahoma City, Oklahoma (DDOO) at Tinker Air Force Base Oklahoma City, OK. These ESS and EKC systems include various subcomponents, such as card readers, intercom devices, security controllers, video recorders, security cameras, sensors, central monitoring equipment, duress alarms and key containers. The Contractor will be responsible for these systems up to Regional Operation Center (ROC).

B. The Contractor will provide the personnel, hardware, and technical services for DLA Distribution Oklahoma City, Oklahoma. The Contractor shall provide services for the Lenel, Pelco CCTV system, Federal Signal Mass Notification System and Morse Keywatch System at

DDOO.

C. This PWs contains task requirements for Project Management, Sustainment and Maintenance, Infrastructure and Cybersecurity support or a fully functioning site integrated system.

D. New hardware equipment shall only be installed as a one-for-one replacement for any existing, malfunctioning equipment. Brand new additional, hardware equipment shall not be installed under the parameters of this services PWS. Brand new additional, hardware equipment shall only be procured and installed on a separate, equipment acquisition vehicle.

6.0 TASK REQUIREMENTS

The Contractor shall adhere to the following requirements and definitions for all Tasks within this PWS.

6.1 TASK 1 – PROJECT MANAGEMENT

The Contractor shall provide sufficient management to ensure that these tasks are performed efficiently, accurately, on time, and in compliance with the requirements of this document. The Contractor shall support the following:

6.1.1 CONTRACT PROJECT MANAGER

The Contractor shall provide a Contract Project Manager who shall be responsible for the performance of the work. The Contractor shall provide project management support for all items detailed in this PWS. This support includes providing planning, direction, coordination, and control necessary for effective and efficient accomplishment of all requirements. The Contractor shall be the senior subject matter expert and monitor, control and report status, cost, schedule, and performance; coordinate with Contracting Officer (KO), Contracting Officer Representative (COR), Technical Point of Contact (TPOC), Project Management Office (PMO).

The Contractor shall attend meetings and provide other support as needed. The Contract Project Manager or alternate shall have full authority to act for the Contractor on all contract matters relating to the operations of this contract. The Contract Project Manager or alternate shall be available Monday through Friday, excluding Federal holidays, between the hours of 0700-1530 hours local time (PST) Monday through Friday and within four hours after normal working hours (emergency repairs-corrective maintenance) upon request of the KO or COR to meet on the installation as required to discuss problem areas.

6.1.2 WORK EFFORT

The Contractor shall manage the total work effort associated with the PWS herein to assure fully adequate and timely completion of all Tasks included in this function are a full range of management duties including, but not limited to, planning, developing, and implementing project plans, scheduling, report preparation, communication, and coordinating with stakeholders, escalation procedures, establishing and maintaining records, monitoring, and quality control. The Contractor shall provide an adequate staff of personnel with the necessary management expertise to assure the performance of the work in accordance with sound and efficient management practices.

6.1.3 WORK CONTROL

The Contractor shall implement all necessary work control procedures to ensure timely accomplishment of work requirements, as well as to permit tracking of work in progress. The Contractor shall plan and schedule work to assure material, labor, and equipment of all contracted items are available to complete work requirements within the specified time limits and in conformance with the quality standards established herein.

6.1.4 CONFIGURATION MANAGEMENT

The Contractor shall adopt the DLA Configuration Management Plan with an initial Configuration Management Plan provide to the COR within ten (10) business days of contract start and updated in the Monthly Status Report (MSR), ensuring all hardware and software changes are approved by the COR. The Contractor shall support IT Service Management, (currently Service Now) ticketing system, Change Implementation Plans (CIPs), and provide technical expertise in Enterprise Change Requests (ECRs) that addresses product management and version control for software (changes) and hardware. The Contractor shall support business processes documentation such as Scheduled Maintenance Requests and Information Technology Operations Center (ITOC) notice (Infospot) and all other control items such as customer notifications. The Contractor shall evaluate all changes to the approved system requirements baseline for risk to security, and for schedule and cost impact, provide evaluations in writing and with sufficient detail to allow for review and approval by the configuration governance structure as required. CIPs and ECRs are required twenty-one (21) business days in advance of required change.

6.1.5 CONFIGURATION AUDIT

A configuration audit is an inventory of all existing hardware, software, drawings, and technical documentation and is a function of configuration management. The Contractor shall perform an initial configuration audit, provide to the COR within ten (10) business days of contract start and updated in the Monthly Status Report (MSR) (Section 3.6).

6.1.6 WORK SCHEDULE

The Contractor shall schedule and arrange work to cause the least interference with the normal occurrence of Government business and mission. In those cases where some interference may be essentially unavoidable, the Contractor shall make every effort to minimize the impact of the interference, inconvenience, equipment downtime, interrupted service, customer discomfort, Non-scheduled visits will be coordinated with the COR at least five (5) working days in advance and notify the COR if the work being performed may cause interference. Notification shall include the type of work to be done and the estimated completion date. The Contractor shall reschedule any work that the COR or KO deems necessary to avoid unacceptable disruptions in the Government's business.

6.1.7 WORK RECORDS/REPORTS

The Contractor shall maintain management, maintenance, repair records, and reports as set forth herein. All final records and copies of reports shall be turned over to the COR ten (10) calendar days prior contract completion.

6.1.8 STAFFING

The Contractor shall continuously maintain an adequate staff with expertise to assure work is scheduled and completed in accordance with these specifications. The Contractor shall maintain a certified work force to complete work in accordance with the time and quality standards specified.

6.1.9 PROJECT SCHEDULE/PLAN

The Contractor shall create, maintain, and submit project plans and schedules. Initial plans and schedules are due within five (5) business days after award and shall be updated at least monthly, within the Monthly Status Report (MSR), until contract completion. The Government shall return unacceptable plans and schedules for re-work, then the Contractor shall update and re-submit project plans and schedules within five (5) business day of request. This includes any plans or scheduled required for upgrades, network or data migrations, installation, or replacement of device(s) and or application(s). (Microsoft Project Manager is the preferred software). Project Schedules shall include auto scheduled task #, task name, duration in days, % complete, resource, actual start date, actual finish date, and predecessors and/or successors shall be utilized to identify the sequence of events and critical path. The Contractor will coordinate with the COR and J6 TPOC if the schedules need to be re-baselined.

6.1.10 MEETINGS

The Contractor shall coordinate a post award Kickoff meeting prior to the initiation of work and thereafter conduct monthly In Process Review (IPR) meetings. These meetings will be held with the Contractor, CPM, KO, Contract Specialist (KS), COR, and the J6 TPOC to discuss an overview of Contractor’s plans to manage scope, schedule, and resources. The Contractor will discuss stakeholders’ expectations, details of contract execution including incident management, triage support, technology road map plans including current and future software/hardware landscape general conditions, project schedule/plan, work schedules, coordination, security, safety, deliverables, permits, and other matters pertinent to work accomplishments shall be discussed in this meeting. Contractor shall attend other meetings as required in support of contract tasks.

6.1.11 PHASE-IN TRAINING

A. A phase-in period shall be established to allow the Contractor sufficient time to integrate personnel and transition into duties required to perform the requirements of the contract and ensure employees who will require access to the Installation and Government Information Technology (IT) systems obtain a Common Access Card (CAC) In Accordance With (IAW) this PWS. Instructions for all Phase-In Training are available upon request.

1. The Contractor will submit to the COR all required on-boarding documentation to obtain

CAC, network access and administrative tokens no later than fifteen (15) calendar days prior to contract full start date.

2. The phase-in period shall begin at the effective date of the contract and shall not exceed one (1) month, at which time full performance shall commence.

3. The Contractor shall ensure that all Contractor personnel are ready to begin working on the first day of full performance including having all accesses, tokens, and permissions required to support servers, databases, clients, and all software or hardware of the systems.

4. During the phase-in period, Contractor personnel shall complete security and safety training on site. Training will be scheduled through the DLA Distribution site training office and will at a minimum include the following classes. Estimated in class time is 3 hours.

a) Active Shooter Briefing

b) Safety Briefing

c) Shelter in Place/Evacuation Awareness Briefing

5. During the one month phased-in period to ensure all Contractor personnel know and understand regulations and policy pertaining to physical, information, operations and personnel security, the Contractor shall provide security and antiterrorism training to all employees in accordance with applicable DOD regulatory requirements. At a minimum, security training requirements as required by the DLA Issuances and other applicable DOD guidance will be completed annually for the following on-line training: Estimated in class time is eight (8) hours. If the Contractor has previously taken this training valid copies of certifications or training completion is allowed.

a) Cyber Awareness Challenge

b) Antiterrorism (AT) Level 1

c) Operations Security (OPSEC)

d) Counterintelligence Awareness Training

e) Personally, Identifiable Information Awareness

f) Trafficking in Persons

6. The security training is web-based, and access will be provided by the Government. The

Contractor shall ensure Contractor personnel have taken the required security training to meet DoD guidance and that the personnel continue to maintain their certifications.

6.1.11 TRANSITION SUPPORT

A. The optional transition support task may be exercised by the Government for a period of up to 90 days before the end of the Contract. The Contractor shall provide knowledge transfer and training to any follow-on Contractor to include all the necessary documentation, orientation, collaboration, and training to facilitate the comprehensive understanding and execution of tasks, processes, procedures, schedules, and deliverables in a timely and orderly fashion. All transition activities shall be coordinated with and approved by the COR. The support services provided under this contract are critical to the DLA mission. It is vital that to ensure continuation of services without interruption or dramatic effort be provided. To maintain continuity of services the following requirements will be provided by the current Contractor as the period of performance for the contract is met:

B. The current Contractor shall:

1. Continue to perform all services as prescribed within the PWS without reduction of Key

Personnel, quality of services, and/or any interruption to customers.

2. Provide a transition plan to include risks and costs associated with the transition of

Contractor support from the current Contractor to the new Contractor within fifteen (15) business days prior to contract end date.

3. Facilitate a transition plan that shall address impacts including:

a. Provide current active project transition services associated with any break/fix, upgrade, migration, and/or enhancements planned or in-process.

b. Assist secure required permission, roles, account accesses required for administration of software/hardware.

c. Provide landscape and asset documentation, data dictionaries, or other system documentation for DLA equipment, hardware, software, processes, and overall environment.

d. Provide transition cost analysis, propose schedules, and document risks associated with such transition.

C. The Contractor shall provide a written Transition Plan for the transition of services from the current Contractor to the follow-on Contractor to perform all services required. The Transition Plan shall be provided withing fifteen (15) days of the Governments request and shall describe all training requirements/personnel that will be provided by the Contractor to execute the transfer of knowledge as well as processes and schedule.